This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft File: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json) Hash identifier: HQEdYyloNF+hgBvgd6Vkj/k3fI0GZOA8ZkXds3foUI0= Subject key identifier: 3F:F0:23:F0:A2:28:B8:64:DF:33:DF:B9:78:FF:C8:5C:79:DE:16:31 Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77 Certificate issuer: /CN=f7b069d33df1225a8b3643a01364f279df40d877 Certificate serial: 019B0F00F6AEDB5296283171260E1A77BB34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft Manifest number: 0466 Signing time: Thu 11 Dec 2025 20:01:19 +0000 Manifest this update: Thu 11 Dec 2025 20:01:19 +0000 Manifest next update: Fri 12 Dec 2025 20:01:19 +0000 Files and hashes: 1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: nVj8xEzYw7WDYEXW0ok1dhETWG5p7kHNoN1K/OzVuqA=) 2: G8WBqm_n-G2Dq7rJrsvaHEWmDxE.roa (hash: IA50muj3Iqkw7YnSvxI1jyledliIC9BsrNcG2Szt4iM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:f6:ae:db:52:96:28:31:71:26:0e:1a:77:bb:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877 Validity Not Before: Dec 11 20:01:19 2025 GMT Not After : Dec 12 20:01:19 2025 GMT Subject: CN=3ff023f0a228b864df33dfb978ffc85c79de1631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:16:39:a9:80:76:9e:9c:28:bb:92:d7:90: f2:7e:38:51:6d:ef:9a:b4:c3:65:cb:b8:80:d2:12: 35:6e:1f:26:5c:d3:dc:87:40:89:ac:52:fb:1c:6b: cb:1e:26:77:db:3e:5f:82:db:9f:98:18:49:7a:15: 03:83:2d:fd:31:76:0a:cf:0d:4d:cc:d1:a9:33:42: b3:5a:bb:b7:ab:1d:70:97:30:8c:8a:17:ce:13:fc: 50:92:3b:a7:31:a9:be:a3:4f:38:18:c0:c0:8d:71: 13:19:02:b1:0d:a4:35:4b:fb:0d:7d:16:78:ac:13: b3:55:6f:96:87:6c:08:7f:45:5f:fd:ec:bb:29:d6: 96:84:f9:d3:39:1c:f6:b8:a7:67:b0:05:10:04:36: 84:0e:b6:53:8d:88:45:3a:12:96:84:70:8e:4e:b9: 8c:d5:4a:25:f0:cf:c0:b7:02:2a:79:89:ac:58:0b: bc:74:a0:b6:7d:44:0d:85:3a:70:02:42:4b:e0:07: b9:9c:b2:7a:d3:d1:9d:da:5f:5e:c8:8b:5d:f7:d3: 01:06:0b:a1:1d:14:24:49:8b:a8:b5:d8:2e:8e:d6: 74:e7:a2:a9:44:7f:bb:4c:9f:2e:ca:f1:e6:bf:9b: af:6f:a7:eb:c5:2a:0e:13:61:fd:b9:4e:7f:69:0d: 0d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F0:23:F0:A2:28:B8:64:DF:33:DF:B9:78:FF:C8:5C:79:DE:16:31 X509v3 Authority Key Identifier: keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:78:5e:3b:ef:26:2f:95:25:e7:9c:60:eb:b5:d0:5c:05:af: 8b:88:22:8e:74:88:6e:c6:12:0e:97:74:a2:9f:80:f7:4e:fd: 0c:3c:77:28:58:c4:76:d7:33:f6:28:8b:6c:c9:ec:33:fa:bb: e3:2a:97:7a:d3:47:9f:fd:9c:3d:66:c1:45:f1:8c:99:87:12: 6c:50:bf:ac:7b:2d:2d:33:1c:1d:49:91:ad:29:a7:51:d5:bc: 9c:d9:5f:41:57:b2:4a:b5:07:ca:da:ae:77:39:3f:b2:02:cc: 88:4b:b2:66:30:31:a9:19:6a:ca:d2:9d:3e:65:1f:d1:ae:88: f2:59:9a:d1:5f:e9:d0:5a:a4:f8:a6:65:05:83:93:ae:e0:84: 84:c5:00:9c:93:1a:14:96:d9:63:c7:fc:77:60:70:54:97:4b: b2:36:8b:c6:56:82:da:23:69:42:a8:90:39:68:2a:cf:5c:c0: a0:33:3a:c3:92:24:78:30:b5:a9:78:29:f1:b1:3e:b8:d5:a2: cf:da:1f:32:a2:c0:2a:b6:26:ae:07:67:7c:a0:27:3a:03:2f: 53:63:41:aa:bc:1f:05:5d:a1:6e:09:ab:64:d1:ea:92:d9:07: e8:ec:c8:23:85:0b:4a:df:8f:96:db:fa:71:7d:ab:e0:dc:d2: f7:a4:4a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAPau21KWKDFxJg4ad7s0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjA2OWQzM2RmMTIyNWE4YjM2NDNhMDEzNjRmMjc5ZGY0 MGQ4NzcwHhcNMjUxMjExMjAwMTE5WhcNMjUxMjEyMjAwMTE5WjAzMTEwLwYDVQQD EygzZmYwMjNmMGEyMjhiODY0ZGYzM2RmYjk3OGZmYzg1Yzc5ZGUxNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskEWOamAdp6cKLuS15DyfjhRbe+a tMNly7iA0hI1bh8mXNPch0CJrFL7HGvLHiZ32z5fgtufmBhJehUDgy39MXYKzw1N zNGpM0KzWru3qx1wlzCMihfOE/xQkjunMam+o084GMDAjXETGQKxDaQ1S/sNfRZ4 rBOzVW+Wh2wIf0Vf/ey7KdaWhPnTORz2uKdnsAUQBDaEDrZTjYhFOhKWhHCOTrmM 1Uol8M/AtwIqeYmsWAu8dKC2fUQNhTpwAkJL4Ae5nLJ609Gd2l9eyItd99MBBguh HRQkSYuotdgujtZ056KpRH+7TJ8uyvHmv5uvb6frxSoOE2H9uU5/aQ0NCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/wI/CiKLhk3zPfuXj/yFx53hYxMB8GA1UdIwQY MBaAFPewadM98SJaizZDoBNk8nnfQNh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMt NWZkY2I3ODNhNmVjLzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMtNWZkY2I3ODNhNmVj LzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnheO+8m L5Ul55xg67XQXAWvi4gijnSIbsYSDpd0op+A9079DDx3KFjEdtcz9iiLbMnsM/q7 4yqXetNHn/2cPWbBRfGMmYcSbFC/rHstLTMcHUmRrSmnUdW8nNlfQVeySrUHytqu dzk/sgLMiEuyZjAxqRlqytKdPmUf0a6I8lma0V/p0Fqk+KZlBYOTruCEhMUAnJMa FJbZY8f8d2BwVJdLsjaLxlaC2iNpQqiQOWgqz1zAoDM6w5IkeDC1qXgp8bE+uNWi z9ofMqLAKrYmrgdnfKAnOgMvU2NBqrwfBV2hbgmrZNHqktkH6OzII4ULSt+Pltv6 cX2r4NzS96RK3g== -----END CERTIFICATE-----Generated at Thu Dec 11 23:58:11 2025 by rpki-client